Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/323830343a343635343a343030303a3a2f33342d3334203d3e20323636393833.roa
File: 323830343a343635343a343030303a3a2f33342d3334203d3e20323636393833.roa (raw, json)
Hash identifier: Nm3EUn5V2Z9HvwQQi+iuPy3fV92DlLRLNzxF5ZxoNmI=
Subject key identifier: 3F:62:21:C1:E3:F9:B2:6B:0B:15:A1:F2:D2:EC:99:FC:C7:34:6E:9B
Certificate issuer: /CN=FC7B655C6372CB73D708B42D83FE2B62B3EEF17D
Certificate serial: 7DAE069142D41538309245D73CAE530A2AAE1628
Authority key identifier: FC:7B:65:5C:63:72:CB:73:D7:08:B4:2D:83:FE:2B:62:B3:EE:F1:7D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC7B655C6372CB73D708B42D83FE2B62B3EEF17D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/323830343a343635343a343030303a3a2f33342d3334203d3e20323636393833.roa
Signing time: Thu 10 Apr 2025 12:10:31 +0000
ROA not before: Thu 10 Apr 2025 12:05:31 +0000
ROA not after: Thu 09 Apr 2026 12:10:31 +0000
asID: 266983
IP address blocks: 2804:4654:4000::/34 maxlen: 34
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:ae:06:91:42:d4:15:38:30:92:45:d7:3c:ae:53:0a:2a:ae:16:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FC7B655C6372CB73D708B42D83FE2B62B3EEF17D
Validity
Not Before: Apr 10 12:05:31 2025 GMT
Not After : Apr 9 12:10:31 2026 GMT
Subject: CN=3F6221C1E3F9B26B0B15A1F2D2EC99FCC7346E9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b2:ff:6e:94:1f:13:78:29:7f:a5:0a:58:d4:
95:8c:d6:3c:f1:c8:c3:f1:a5:0c:49:d3:99:69:d9:
18:1f:cc:d9:b2:92:19:b5:7d:0c:94:56:e2:e9:ee:
5a:ff:92:83:d0:7a:be:89:bc:ef:85:dc:5a:f8:70:
bd:8e:09:f0:90:ff:52:c7:6d:25:7d:8b:78:7b:cf:
59:10:07:d4:fc:51:5c:73:2e:56:0e:06:db:15:6e:
1d:14:74:b1:4c:d4:bb:31:62:87:5e:e7:d1:1d:8c:
04:0d:e3:5f:61:12:fd:05:1f:d3:73:c0:47:29:57:
3c:41:22:30:9d:1a:1c:95:38:8d:82:2f:79:7b:4d:
18:49:e1:7c:d0:0e:87:e2:d2:65:1d:2e:17:95:fa:
86:73:5d:89:50:55:fd:e1:cf:76:81:4d:2b:3d:a0:
44:68:49:16:c8:44:e6:c6:ca:41:09:0c:c7:15:ff:
3f:9e:de:a7:2f:73:59:7b:0f:8f:f8:79:f8:c9:f4:
f3:08:35:c3:d1:4f:9f:8a:18:6b:23:4b:4b:42:ae:
3a:ef:a9:e6:6c:fe:bf:d1:61:03:d0:51:0d:63:b2:
9f:de:50:9f:c8:d0:20:27:8c:1f:b6:40:6d:c0:a3:
5b:48:87:7d:b8:a5:53:82:84:e2:c4:a8:1a:4b:77:
d9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:62:21:C1:E3:F9:B2:6B:0B:15:A1:F2:D2:EC:99:FC:C7:34:6E:9B
X509v3 Authority Key Identifier:
keyid:FC:7B:65:5C:63:72:CB:73:D7:08:B4:2D:83:FE:2B:62:B3:EE:F1:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/FC7B655C6372CB73D708B42D83FE2B62B3EEF17D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC7B655C6372CB73D708B42D83FE2B62B3EEF17D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/323830343a343635343a343030303a3a2f33342d3334203d3e20323636393833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4654:4000::/34
Signature Algorithm: sha256WithRSAEncryption
66:a4:f4:d4:df:2d:95:14:7a:6c:81:68:33:3a:f9:7c:78:00:
5b:9a:69:3a:fc:ed:0a:57:58:40:3d:27:ea:93:2f:cd:3f:b4:
d5:71:6a:a0:8d:f9:d4:ec:f2:4d:a5:24:61:26:dc:e2:9b:90:
11:1f:82:62:28:f1:03:bc:bd:5a:6e:a0:29:f3:83:5e:e8:94:
69:5a:97:55:b6:9e:ce:91:00:39:77:3b:35:2b:94:4f:eb:b0:
17:40:f9:f1:94:d9:7d:14:37:c7:7a:cb:5c:da:b1:38:fc:3f:
83:d3:aa:35:7d:ef:41:cf:8f:d5:46:73:14:c2:7f:13:e7:5b:
89:6d:e8:7f:96:c0:1e:08:fa:01:dc:c6:00:56:76:14:30:fe:
1f:f6:5c:7a:44:c1:0b:27:06:58:bc:1a:c6:d2:02:31:1a:fa:
23:b5:c4:b9:1d:c2:ff:03:30:80:67:b1:68:7c:ce:ce:9b:2f:
b1:db:3f:29:26:4b:cc:2a:82:06:2f:6a:28:2b:a1:11:45:8b:
52:75:ca:25:7c:65:7c:a2:25:96:62:35:f8:79:30:de:4b:5a:
01:96:d7:ea:2d:0c:ce:47:d6:6f:85:0b:1f:f3:39:75:00:ae:
42:b5:40:ff:22:38:46:a6:aa:89:b4:b8:25:5a:77:0a:c9:62:
ef:8a:7f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:13:35 2025 by rpki-client on console.sobornost.net